Cross Site Request Forgery (CSRF) vulnerability in Bluethrust Clan Scripts v4 allows attackers to escilate privledges to an arbitrary account via a crafted request to /members/console.php?cID=5.Read M ...
Continue Reading
May 08, 2023
File upload vulnerability in MCMS 5.0 allows attackers to execute arbitrary code via a crafted thumbnail. A different vulnerability than CVE-2022-31943.Read More ...
Continue Reading
May 08, 2023
Cross-site scripting (XSS) vulnerability in NoneCms 1.3.0 allows remote attackers to inject arbitrary web script or HTML via feedback feature.Read More ...
Continue Reading
May 08, 2023
SQL Injection vulnerability in CMS Made Simple through 2.2.15 allows remote attackers to execute arbitrary commands via the m1_sortby parameter to modules/News/function.admin_articlestab.php.Read More ...
Continue Reading
May 08, 2023
File upload vulnerability in CMS Made Simple through 2.2.15 allows remote authenticated attackers to gain a webshell via a crafted phar file.Read More ...
Continue Reading
May 08, 2023
Open redirect vulnerability in typecho 1.1-17.10.30-release via the referer parameter to Login.php.Read More ...
Continue Reading
May 08, 2023
SQL Injection vulnerability in victor cms 1.0 allows attackers to execute arbitrary commands via the post parameter to /post.php in a crafted GET request.Read More ...
Continue Reading
May 08, 2023
The Enable/Disable Auto Login when Register WordPress plugin through 1.1.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change th ...
Continue Reading
May 08, 2023
Back to Main
